The power of the 
Qualys Cloud Platform 


Complete, real-time inventory of all IT 
assets - wherever they reside 


Continuous assessment of your global 
security & compliance posture 


Identify zero-day vulnerabilities and 
2 compromised assets 


Automatically patch and quarantine 
assets 


Consolidate your security & compliance 
stacks 


Drastically reduce your spend 


Qualys Cloud Platform. 


The revolutionary architecture that powers 
Qualys’ IT 


security and compliance 


cloud apps. 
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Unique advantages of the Qualys Cloud Platform 
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No hardware to 
buy or manage 


Nothing to install or 
manage, and all services 
are accessible in the 
cloud via web interface. 
Qualys operates and 
maintains everything. 


Lower 
operating costs 


With everything in the 
cloud, there are no capital 
expenditures, no extra 
human resources needed, 
and no infrastructure or 
software to buy and 
maintain. 


Easy global 
© scanning 


Easily perform scans on 
geographically distributed 
and segmented networks at 
the perimeter, behind the 
firewall, on dynamic cloud 
environments and endpoints. 


Seamless 
scaling 
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Qualys Cloud Platform is 

a scalable, end-to-end 
solution for all aspects of 
IT security. Once deployed, 
seamlessly add new 
coverage, users and 
services as you need them. 


Qualys Cloud Platform in numbers 
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Respond to threats 
immediately 


lion $+ trilion 99.9996% 


Data Points Indexed on Six Sigma Scanning 


Elasticsearch Clusters Accuracy 


mmediately 


See the results in one place, 


anytime, anywhere 


Up-to-date 


© resources 


Qualys has the largest 


knowledge base of 
vulnerability signatures in 
the industry and performs 
over 3 billion IP scans per 
year. All security updates 
are made in real time. 
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Vulnerability data is 
securely stored and 
processed in an n-tiered 
architecture of load-balanced 
servers. Our encrypted 
databases are physically 
and logically secure. 
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LATEST THREATS FROM LIVE FEED 


EASILY EXPLOITABLE 


ASSETS WITH ANGLER ASSETS WITH PUBLIC ASSETS W/ ACTIVE 0 DAY 
EXPLOITABLE VULN. EXPLOIT AVAILABLE 


Available as a Public or Private 
Cloud, on-premises 
Full server rack For governments, 

and MSSPs 


Virtual rack For governments, 
and MSSPs 


Standalone For small busines 
appliance 


Cloud Platform Apps. 


Qualys apps are fully integrated and natively share the 
data they collect for real-time analysis and correlation. 
Provisioning another app is as easy as checking a box. 


ASSET MANAGEMENT 


Global IT Asset Inventory 
It’s Free! Unlimited assets 


Maintain full, instant visibility of all global 
IT assets wherever they reside (on prem, mobile, 
endpoints, clouds, containers, OT or IoT) 


Certificate Inventory 


CRI 
Inventory TLS/SSL digital certificates on 
a global scale 
IT SECURITY 


Vulnerability Management 


Continuously detect and protect against 
attacks, anytime, anywhere 


Continuous Monitoring 


Alerts you in real time about network 
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CMDB Sync 


Synchronize asset information from Qualys 
into the ServiceNow CMDB 


Threat Protection 


Pinpoint your most critical threats and 
prioritize patching 


Patch Management 


Streamline and accelerate vulnerability 


irregularities remediation for all your IT assets 
Indication of Compromise MA Certificate Assessment 
Threat hunting, suspicious activity Assess your digital certificates and TLS 
monitoring, and malware family detection configurations 
CLOUD/CONTAINER SECURITY 
Cloud Inventory AA Cloud Security 
Inventory public cloud workloads and Assessment 


infrastructure 


Container Security 


Discover, track, and continuously protect 
containers 


Monitor your cloud infrastructure 
against misconfiguration and non-standard 
deployments 


COMPLIANCE MONITORING 


Policy Compliance SCA 


Assess security configurations of IT 
systems throughout your network 


WA PCI Compliance @ 
Automate, simplify and attain PCI 
compliance quickly 
saa) Security Assessment Aon 
Questionnaire 


Minimize the risk of doing business with 
vendors and other third parties 


WEB APPLICATION SECURITY 
Web Application Scanning war 


Secure web applications with end-to-end 
protection 


© Qualys. 


WannaCry Dashboard 


Security Configuration 
Assessment 


Automate configuration assessment of global assets 


File Integrity Monitoring 


Log and track file changes across global 
IT systems 


Out-of-Band Configuration 
Assessment 


Extend security and compliance to 
inaccessible assets 


Web Application Firewall 


Block attacks and virtually patch web 
application vulnerabilities 


TOP 5 EOL/OBSOLETE OPERATING SYSTEMS TOP 5 MISSING MS17-010 PATCH 


MISSING MS17-010 WANNACRY RANSOMEWARE 
PATCH DETECTED - AUTH ONLY 
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ASSETS WITH WANNACRY 


Customizable, user-defined dynamic dashboard for real-time 
tracking progress of WannaCry remediation alerts 


Solutions. 


Consolidate your security and compliance stack 


and keep your teams in sync. 


A single unified view 
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Infrastructure Security 

Everything you need for on-premises data center 
security: asset inventory, passive and active 
scanning, vulnerability management and more. 


Cloud Infrastructure Security 

You must secure the workloads being shifted 

to public clouds. With native AWS, Azure and GCP 
integrations, Qualys gives you instant visibility 
into these instances and full security and 
compliance control. 


Endpoint Security 

The variety and quantity of endpoints on your 
network continue to rise, and so do security and 
compliance risks. With Qualys, you’ll continuously 
discover, track and protect PCs, laptops, IoT 
devices, smartphones, peripherals and other 
endpoints. 


Web App Security 

It’s never been easier for employees to bypass 

IT and install unsafe web apps. Qualys continually 
detects all your web apps - approved and 
unapproved - and provides continuous cloud- 
based protection. 


DevSecOps 

Qualys puts security into your DevOps 
environment, automating the detection of 
coding and configuration errors in your iterative, 
collaborative software development lifecycle, 
prioritizing vulnerability remediation, shielding 
web apps and flagging hacker intrusions. 


Compliance 

You enforce compliance with complex internal 
policies, industry mandates and external regulations, 
and assess vendor nsk. Qualys’ cloud-based solutions 
give you the clarity, control and flexibility you need 
to keep your organization compliant. 


Building security and compliance for the digital 
transformation with the Qualys Cloud Platform 


The digital transformation is bringing new opportunities to your company—but also 


exposing it to new security risks. New vulnerabilities, regulations and tools are surfacing 
all the time. The Qualys Cloud Platform can guide your company through all of it. 


Streamline your IT 

security operations 

across clouds 
Save time and money with Qualys’ all-in-one, cloud- 
based solution. No hardware to install or software to 


maintain. Avoid the gaps that come with trying to 
glue together siloed solutions. 


See it all in one place, 
anytime, anywhere, in 
real time 
See your security and compliance posture in one 
browser window, without plugins or a VPN. No need 


to wait for reports to run—all the data is updated in 
real time. 


© Demonstrate and 


maintain compliance 


Respond to auditors and regulations in a timely and 
accurate manner. We help you show that the 


required controls are in place and your environment 
is continually compliant. 


Achieve IT, security and compliance 
in a single platform and drastically 
reduce your spend. 
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Analyze the Future 


“The Qualys Cloud Platform 
simplifies the complexity associated with 
managing multiple security solutions, 
while at the same time increasing the 


automation, effectiveness and proactive 


. 3) 
nature of security. 


Products at IDC 


La Robert Ayoub 
Ca Research Director, Security 
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About Qualys. 


The leading provider of cloud-based 
IT, security and compliance solutions. 


Born in the cloud with a fresh 
approach to security 


Qualys, Inc. (NASDAQ: QLYS) is a pioneer and 
leading provider of cloud-based security and 
comphance solutions with over 11,000 
customers in more than 130 countries, including 
a majority of each of the Forbes Global 100 and 
Fortune 100. Qualys helps organizations 
streamline and consolidate their security and 
compliance solutions in a single platform and 
build security into digital transformation 
initiatives for greater agility, better business 
outcomes and substantial cost savings. 


The Qualys Cloud Platform and its integrated 
cloud apps deliver critical security intelligence 
continuously, enabling businesses to automate 
the full spectrum of auditing, compliance and 
protection for IT systems and web applications 
on-premises, on endpoints and elastic clouds. 


Try Qualys Global IT Asset 
Inventory (it’s free) at 
qualys.com/inventory 


You can’t secure what you can’t see or don’t 
know. Use Qualys’ free Global Asset Inventory 
app to discover and categorize all of your 
known and unknown assets that connect to 
your global hybrid-IT environment. Fully 
cloud-based, it’s easy to deploy and manage! 
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Trusted globally 


(©) R0 0Re [0] 07s] E ele slalssistomlal 
more than 130 countries trust 
Qualys to streamline their security 
and compliance solutions and build 
security into their digital 
transformation initiatives - for 
greater agility, better business 
outcomes, and substantial 


cost savings. 


More than 70% of the Forbes 
Global 50 rely on Qualys: 


</> 9 of the top 10 in Technology 
9 of the top 10 in Retail 
9 of the top 10 in Biotech 


7 of the top 10 in Banking 


7 of the top 10 in Chemical 


